src - OpenBSD base system

Age	Commit message (Expand)	Author
2014-10-05	Fix memory leak in the error path of v2i_AUTHORITY_KEYID().	Miod Vallat
2014-10-05	compile with c89 (code / decl ordering); from Joakim.Tjernlund@transmode.se	Theo de Raadt
2014-10-05	Use more specific curves/formats naming for local variables in	Joel Sing
2014-10-05	Use tls1_get_curvelist() in ssl_add_clienthello_tlsext(), rather than	Joel Sing
2014-10-05	Make tls1_get_formatlist() behave the same as tls1_get_curvelist() and	Joel Sing
2014-10-03	verify changes are major change	Ted Unangst
2014-10-03	Strip trailing new-lines from syslog messages. This avoids empty	Alexander Bluhm
2014-10-03	Bump minor for ECHD auto and other recent changes.	Joel Sing
2014-10-03	Bump minor version for ECDH auto.	Joel Sing
2014-10-03	allow disabling hostname and cert verification separately.	Ted Unangst
2014-10-03	Allow "auto" to be specified as an ECDH curve name and make this the	Joel Sing
2014-10-03	Add support for automatic ephemeral EC keys.	Joel Sing
2014-10-03	Use string literals in printf style calls so gcc's -Wformat works.	Doug Hogan
2014-10-02	Fix a crash when there is text after a failed %Z conversion in strptime.	Doug Hogan
2014-10-01	openssl.cnf tweaks following recent changes to usr.bin/openssl:	Stuart Henderson
2014-09-30	Clean up EC cipher handling in ssl3_choose_cipher().	Joel Sing
2014-09-29	Bump major to 28, regen .pc and header with new version info.	James Turner
2014-09-29	Merge conflicts.	James Turner
2014-09-29	Update sqlite3 to 3.8.6. A list of changes are available here:	James Turner
2014-09-29	Previous fix (1.12) would cause a NULL pointer dereference in the error path	Miod Vallat
2014-09-29	Move cipher configuration handling to the shared SSL configuration function	Joel Sing
2014-09-29	Add an option that allows the enabled SSL protocols to be explicitly	Joel Sing
2014-09-29	When freeing the config, explicitly call ressl_config_clear_keys() rather	Joel Sing
2014-09-29	check_cert(): be sure to reset ctx->current_crl to NULL before freeing it.	Miod Vallat
2014-09-29	X509_NAME_get_text_by_OBJ(): make sure we do not pass a negative size to	Miod Vallat
2014-09-29	X509_VERIFY_PARAM_set1_name(): if invoked with NULL as the second	Miod Vallat
2014-09-28	Wrap long lines and add missing argument name.	Joel Sing
2014-09-28	Bump minor after adding SSL_CTX_use_certificate_chain().	Reyk Floeter
2014-09-28	Provide a ressl config function that explicitly clears keys.	Joel Sing
2014-09-28	Add a new API function SSL_CTX_use_certificate_chain() that allows to	Reyk Floeter
2014-09-28	X509v3_add_ext(): do not free stuff we did not allocate in the error path.	Miod Vallat
2014-09-28	X509_TRUST_add(): check X509_TRUST_get0() return value before dereferencing it,	Miod Vallat
2014-09-28	Someone (TM) thought it was smart to save memory by using malloc(1) and	Miod Vallat
2014-09-28	revamp the config interface to own memory. easier to use correctly without	Ted Unangst
2014-09-27	Revert r1.5 and reenable assembler version of ghash now that it has been	Miod Vallat
2014-09-27	Doh, rev 1.4 had left out one routine with both 32-bit and 64-bit code, where	Miod Vallat
2014-09-27	Disable assembler code for ghash on hppa, causes wrong computations in some	Miod Vallat
2014-09-27	There is not much point checking ecdhp is not NULL... twice.	Joel Sing
2014-09-27	Check that the specified curve is one of the client preferences.	Joel Sing
2014-09-27	Explain why we deviate slightly from the PBKDF2 standard.	Doug Hogan
2014-09-26	X509_STORE_new(): do not leak memory upon error.	Miod Vallat
2014-09-26	X509_issuer_and_serial_hash(): do not leak memory if an error occurs during	Miod Vallat
2014-09-26	X509at_add1_attr(): do not free stuff we did not allocate in the error path.	Miod Vallat
2014-09-26	Now that we have a static version of the default EC formats, also use it	Joel Sing
2014-09-23	Fix regression introduced in revision 1.15 by using strndup() instead of	Miod Vallat
2014-09-22	Refactor and simplify the ECC extension handling. The existing code	Joel Sing
2014-09-22	Also check the result from final_finish_mac() against finish_mac_length in	Joel Sing
2014-09-22	It is possible (although unlikely in practice) for peer_finish_md_len to	Joel Sing
2014-09-21	Document SSL_OP_TLSEXT_PADDING.	Joel Sing
2014-09-21	Move the TLS padding extension under an SSL_OP_TLSEXT_PADDING option, which	Joel Sing